9.3. Configuring Auditing

Before you enable auditing on your systems, you should customize the audit configuration files for your site. You can restart the auditing service or reboot the system to read changed configuration files after the auditing service is enabled. However, the recommended practice is to customize your audit configuration as much as possible before you start the auditing service.

The following sections introduce the audit configuration files and provide examples of their use and syntax.